3 terms
The right to have your personal data deleted — also known as the "right to be forgotten."
The right to obtain a copy of your personal data and information about how it is processed.
A written record of all processing activities carried out by a data controller or processor — required under GDPR Article 30.